Which data type is commonly stolen by memory-resident fileless malware when it exfiltrates data?

Which data type is commonly stolen by memory-resident fileless malware when it exfiltrates data?

• A. Browser cookies
• B. Keystrokes and credentials
• C. Encryption keys
• D. System event logs

Answer: (B)

Memory-resident, fileless malware stays in RAM to avoid leaving disk traces, so it prioritizes data that’s readily accessible in memory and immediately usable for compromising accounts. Keystrokes capture what users type, including passwords and other secrets entered into websites and apps, while credentials stored or cached in memory can be exploited to authenticate to systems or services. This combination directly provides usable access with minimal footprint, which is why it’s the typical target for exfiltration. Other data like browser cookies, encryption keys, or system event logs can be valuable in some contexts, but they’re not as consistently exploited by memory-resident techniques for quick, repeatable access.

Memory-resident, fileless malware stays in RAM to avoid leaving disk traces, so it prioritizes data that’s readily accessible in memory and immediately usable for compromising accounts. Keystrokes capture what users type, including passwords and other secrets entered into websites and apps, while credentials stored or cached in memory can be exploited to authenticate to systems or services. This combination directly provides usable access with minimal footprint, which is why it’s the typical target for exfiltration. Other data like browser cookies, encryption keys, or system event logs can be valuable in some contexts, but they’re not as consistently exploited by memory-resident techniques for quick, repeatable access.